enterprise risk management (ERM)



Defined by the US 'Committee Of Sponsoring Organizations Of Treadway Commission' (COSO) as, "a process, effected by an entity's board of directors, management and other personnel, applied in strategy setting and across the enterprise, designed to identify potential events that may affect the entity, and manage risks to be within its risk appetite, to provide reasonable assurance regarding the achievement of entity objectives." COSO divides ERM process into eight components: (1) internal environment, (2) objective setting, (3) event identification, (4) risk assessment, (5) risk response, (6) control activities, (7) information and communication, and (8) monitoring.

Use this term in a sentence

  • Certain projects will have a high enterprise risk management and you must have people on hand that can handle that.

    3 people found this helpful
  • You should do your best to assess any enterprise risk management so that you end up getting more of the reward than the risk

    7 people found this helpful
  • Our brand new enterprise risk management section was in full swing and that made all of us happy in the company.

    10 people found this helpful
Show more usage examples...

Related Videos


Have a question about this term? Ask for help in the
Browse by Letter: # A B C D E F G H I J K L M N O P Q R S T U V W X Y Z